C drive filling up, ran MWB and it's still happening. How do I get rid of it and the files it's downloaded?

dlaney

Honorable
May 26, 2013
3
0
10,510
MWB found and quarantined a bunch of threats, I restarted. It's now blocking something from access to "1.winsrw.com" every ~15 seconds which I assume is what caused C to fill.

I'm now running Spybot S+D, and ran MWB again, which found one thing. It's still doing its heuristic analysis thing.

The outbound thing is apparently happening from a folder somewhere in APPDATA called Aptworks\spc32.exe. I haven't been able to find it, and I can't figure out how to get MWB to show me the full path.

Can anyone tell me how to get rid of it, and how to find and delete the files it's downloaded? I have less than 1gb left on C and I need to get some work done!

Thanks!


Windows 8.1
6.00gb RAM

I'm around tonight so let me know if I've missed anything and I'll reply asap.
 

BadActor

Estimable
Herald
Boot up in safe mode and run Malwarebytes Antimalware again along with Adwarecleaner. Next run Hitman Pro, and finally, Zemana Antimalware. I would also follow up with a couple of online scanners such as ESET's and TrendMicro. It often takes several different scans to remove threats as most apps won't get everything.

https://www.malwarebytes.com/adwcleaner/

https://www.bleepingcomputer.com/download/hitmanpro/

https://www.zemana.com/en-US/download

https://www.eset.com/us/home/online-scanner/

https://www.trendmicro.com/en_us/forHome/products/housecall.html
 

dlaney

Honorable
May 26, 2013
3
0
10,510
Ran Adwcleaner and Hitman, restarted, re-ran everything, no threats found anywhere :) The outgoing thing has also apparently stopped. Thanks!

However my C drive is still pretty full - does anyone know what sort of files the thing was downloading / where they'd be likely to be found?